.png){kind=icon}
返回
Adversarial self-training for robustness and generalization
.png){kind=icon}
PRE
AI
DOI：10.1016/j.patrec.2024.07.020.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Adversarial training is currently one of the most promising ways to achieve adversarial robustness of deep models. However, even the most sophisticated training methods is far from satisfactory, as improvement in robustness requires either heuristic strategies or more annotated data, which might be problematic in real- world applications. To alleviate these issues, we propose an effective training scheme that avoids prohibitively high cost of additional labeled data by adapting self-training scheme to adversarial training. In particular, we first use the confident prediction for a randomly-augmented image as the pseudo-label for self-training. Then we enforce the consistency regularization by targeting the adversarially-perturbed version of the same image at the pseudo-label, which implicitly suppresses the distortion of representation in latent space. Despite its simplicity, extensive experiments show that our regularization could bring significant advancement in adversarial robustness of a wide range of adversarial training methods and helps the model to generalize its robustness to larger perturbations or even against unseen adversaries.
Keyword:
Adversarial defense
Adversarial attack
Robustness
Generalization
Self-training
期刊
IF:
3.3
论文数:
8.0K
被引数:
1.6W
机构
引用论文
Reversible attack based on adversarial perturbation and reversible data hiding in YUV colorspace
.png){kind=icon}
PREAI
分享收藏
Consistent attack: Universal adversarial perturbation on embodied vision navigation一致攻击: 对体现视觉导航的普遍对抗扰动
OAAI
OAAI分享收藏分享收藏 没有更多内容
没有更多内容